iabudiab.maven.plugins.dependencytrack.client.model.FindingsReport Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of dependency-track-maven-plugin Show documentation

Maven plugin for interacting with Dependency Track

There is a newer version: 2.4.2

Show newest version

package iabudiab.maven.plugins.dependencytrack.client.model;

import java.util.List;
import java.util.Optional;

public class FindingsReport {

	private List findings;

	public FindingsReport(List findings) {
		this.findings = findings;
	}

	private int falsePositives = 0;
	private int notAffected = 0;
	private int suppressed = 0;

	public CharSequence printSummary() {
		StringBuilder builder = new StringBuilder();
		builder.append("--- Findings report ---");
		builder.append("\n");
		if (findings.isEmpty()) {
			builder.append("+ Nothing to report!");
			return builder.toString();
		}

		for (Finding finding : findings) {
			Analysis analysis = finding.getAnalysis();
			if (checkAnalysis(analysis)) {
				continue;
			}

			builder.append("-- Component    : ").append(finding.getComponent().getPurl());
			builder.append("\n");
			builder.append("   Vulnerability: ").append(finding.getVulnerability().reportSummary());
			builder.append("\n");
			builder.append("   Analysis     : ").append(Optional.ofNullable(finding.getAnalysis())
				.map(Analysis::getState)
				.orElse(State.NOT_SET));
			builder.append("\n");
		}

		builder.append("+ False positives : ").append(falsePositives);
		builder.append("\n");
		builder.append("+ Not affected    : ").append(notAffected);
		builder.append("\n");
		builder.append("+ Suppressed      : ").append(suppressed);
		builder.append("\n");

		return builder.toString();
	}

	private boolean checkAnalysis(Analysis analysis) {
		boolean shouldIgnore = false;

		if (analysis.isSuppressed()) {
			suppressed++;
			shouldIgnore = true;
		}

		if (analysis.getState() == State.FALSE_POSITIVE) {
			falsePositives++;
			shouldIgnore = true;
		}

		if (analysis.getState() == State.NOT_AFFECTED) {
			notAffected++;
			shouldIgnore = true;
		}

		return shouldIgnore;
	}
}